Microsoft OneDrive Personal Vault, Google’s New Privacy and Security Controls, REAL ID Deadline

You’re listening to the Shared Security Podcast, exploring the trust you put in people, apps, and technology…with your host, Tom Eston. In episode 89 for October 7th 2019: Microsoft’s new OneDrive personal vault, updated privacy and s… Continue reading Microsoft OneDrive Personal Vault, Google’s New Privacy and Security Controls, REAL ID Deadline

COMpfun successor Reductor infects files on the fly to compromise TLS traffic

In April 2019, we discovered new malware that compromises encrypted web communications in an impressive way. We called these new modules ‘Reductor’ after a .pdb path left in some samples. Continue reading COMpfun successor Reductor infects files on the fly to compromise TLS traffic

APWG: Phishing Continues to Rise, Threat Actors Love Gift Cards

This week APWG released its findings from Q2 of this year that compiles insights from their member companies and provides an analysis of how phishing is changing. This quarter’s report shows that phishing attacks continue to increase, both SaaS an… Continue reading APWG: Phishing Continues to Rise, Threat Actors Love Gift Cards

WordPress HTTPS, SSL & TLS – A Guide For Website Administrators

When you visit a website, your browser (also known as a client) sends a HTTP request to a web server. Once the web server sends an HTTP response, the browser can then render the page to your screen. However, HTTP traffic has a problem; it is a plaintex… Continue reading WordPress HTTPS, SSL & TLS – A Guide For Website Administrators

Smashing Security #145: Apple and Google willy wave while home assistants spy – DoH!

Apple’s furious with Google over iPhone hacking attacks against Uyghur Muslims in China, DNS-over-HTTPS is good for privacy but makes ISPs angry, and concern over digital assistants listening to our private moments continues to rise.
All this and… Continue reading Smashing Security #145: Apple and Google willy wave while home assistants spy – DoH!